SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
47,133 repositories indexed
1–24 of 35 · Most stars
Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
Associate users with roles and permissions
- laravel
- php
- permission
- secure
This is a webshell open source project
- webshell
- webshell-sniper
- php
- jsp
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
- password-manager
- passbolt
- security
- cakephp
PHP Secure Communications Library
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
Laravel Eloquent roles and abilities.
- laravel
- authorization
- eloquent
- php
Platform-Agnostic Security Tokens
- php
- paseto
- paseto-tokens
Captcha for Laravel 5+
An OAuth 2.0 bridge for Laravel and Lumen [DEPRECATED FOR LARAVEL 5.3+]
Handle roles and permissions in your Laravel application
- laratrust
- laravel
- roles
- authorization
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
No CAPTCHA reCAPTCHA For Laravel.
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
PHP Captcha library
ECDH and ECDSA for 8-bit, 32-bit, and 64-bit processors.
PHP library for Two Factor Authentication (TFA / 2FA)
- qrcode
- php
- two-factor
- twofactorauth
A Laravel 5.8 API Boilerplate to create a ready-to-use REST API in seconds.
Laravel Ban simplify blocking and banning Eloquent models.
- laravel
- eloquent
- cog
- trait